CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- intel unison softwareImproper access control for some Intel Unison software may allow an unauthenticated user to...7.5 High
- intel unison softwareImproper input validation for some Intel Unison software may allow an authenticated user to...7.6 High
- intel unison softwareImproper input validation for some Intel Unison software may allow an unauthenticated user to...7.5 High
- intel in-band manageabilityImproper access control in some Intel In-Band Manageability software before version 3.0.14 may...7.3 High
- intel arc a graphics, iris xe graphics +1 moreOut-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before...3.8 Low
- intel arc a graphics, iris xe graphics +1 moreOut-of-bounds write in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers...5.2 Medium
- intel arc a graphics, iris xe graphics +1 moreNULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers...5.6 Medium
- intel arc a graphics, iris xe graphics +1 moreOut-of-bounds write in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers...6.1 Medium
- intel graphics driverNULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers...6.1 Medium
- intel arc a graphics, iris xe graphics +1 moreIncorrect default permissions in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows...6.7 Medium
- intel extreme tuning utilityUncontrolled search path element in some Intel(R) XTU software before version 7.12.0.15 may allow...6.7 Medium
- intel arc a graphics, iris xe graphics +1 moreUnquoted search path or element in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows...6.7 Medium
- intel simics simulatorInsecure inherited permissions in some Intel(R) Simics Simulator software before version 1.7.2...6.7 Medium
- intel arc rgb controllerIncorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may...6.7 Medium
- intel rapid storage technologyInsecure inherited permissions in some Intel Rapid Storage Technology software before version 16...6.7 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7035 series processors with radeon™ graphics “rembrandt-r”, ryzen 3 5125c firmware +68 more +70 moreImproper input validation in the SMM Supervisor may allow an attacker with a compromised SMI...9.8 Critical
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreA race condition in System Management Mode (SMM) code may allow an attacker using a compromised...8.1 High
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreInsufficient protections in System Management Mode (SMM) code may allow an attacker to...7.8 High
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +92 more +94 moreInsufficient protections in System Management Mode (SMM) code may allow an attacker to...7.8 High
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +129 more +131 moreImproper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM...9.8 Critical
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +67 more +69 moreInsufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may...6.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 moreImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker...6.5 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +66 more +68 moreImproper address validation in ASP with SNP enabled may potentially allow an attacker to...5.3 Medium
- amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, genoapi firmware +1 more +3 moreA Use-After-Free vulnerability in the management of an SNP guest context page may allow a...3.3 Low
- amd 3rd gen amd epyc™ processors, 4th gen amd epy™ processors, epyc™ embedded 7003 +65 more +67 moreSMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential...1.9 Low
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 moreFailure to validate the value in APCB may allow a privileged attacker to tamper with the APCB...1.9 Low
- abu bakar twb woocommerce reviews, theweb-designs twb woocommerce +1 moreWordPress TWB Woocommerce Reviews Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 moreInsufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to...6.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 moreInsufficient input validation in the ASP Bootloader may enable a privileged attacker with...1.9 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...3.3 Low
- amd 3rd gen amd epyc™ processors, athlon™ 3000 series desktop processors with radeon™ graphics “picasso” am4, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +121 more +123 moreFailure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM...7.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to...6.7 Medium
- amd 4th gen amd epyc™ processors, epyc™ embedded 9003, epyc 9124 firmware +28 more +30 moreImproper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged...2.5 Low
- amd radeon pro vega 56 firmware, radeon pro vega 64 firmware, radeon rx vega 56 firmware +6 more +8 moreImproper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to...7.5 High
- amd radeon pro vega 56 firmware, radeon pro vega 64 firmware, radeon rx vega 56 firmware +7 more +9 moreImproper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an...6.7 Medium
- amd radeon pro vega 56 firmware, radeon pro vega 64 firmware, radeon rx vega 56 firmware +7 more +9 moreImproper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an...6.7 Medium
- amd radeon pro vega 56 firmware, radeon pro vega 64 firmware, radeon rx vega 56 firmware +7 more +9 moreInsufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access...5.5 Medium
- livescore bzscore, livescore.bz bzscore – live score +1 moreWordPress BZScore – Live Score Plugin <= 1.03 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- marco milesi anac xml bandi di garaWordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- actpro extra product options for woocommerceWordPress Extra Product Options for WooCommerce Plugin <= 3.0.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- blackberry qnx software development platform (sdp), qnx software development platform +1 moreVulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)7.1 High
- typo3Weak Authentication in Session Handling in typo3/cms-core4.2 Medium
- fortinet forticlient, forticlientwindows +1 moreA incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 -...7.1 High
- fortinet fortiadc, fortiddos-f +1 moreA permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 ...5.4 Medium
- fortinet fortianalyzer, fortimanager +1 moreA use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 -...4.1 Medium
- fortinet fortiadc, fortiddos-f +1 moreMultiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities ...6.2 Medium
- fortinet fortimailAn improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2...5.3 Medium
- fortinet fortiwlmA improper neutralization of special elements used in an sql command ('sql injection') in...9.3 Critical
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7...4.4 Medium
- fortinet fortiedr, fortiedr collectorwindows +1 moreAn improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549...4.0 Medium
- Show moreLoading…